Out-Law / Your Daily Need-To-Know

Out-Law News 2 min. read

Government working on browser solution for new cookie law, says spokesman


The Government is working with browser manufacturers to create new settings that will help businesses comply with a controversial new EU law on cookies that is due to come into force in May.

The Government has also insisted that the EU Directive will become UK law by the May deadline, despite a warning from the Information Commissioner that it was unlikely to take effect until autumn.

The EU law will force companies to obtain 'explicit consent' from web users before they make use of cookies, small files placed in a user's browser containing details of their web use.

It has been unclear whether the Government would force companies to ask users outright for their permission or whether the fact that a browser is set to accept cookies can be taken as consent.

A spokesman for the Department of Culture, Media and Sport (DCMS) told OUT-LAW.COM that it was working on a browser-based solution.

"We are working with browser manufacturers to find a way to enhance browser settings so that they can obtain the necessary consent to meet the Directive's standards," said the spokesman.

The Government has also said that it will meet a 25 May deadline set by the European Union for the implementation of the EU law, after Information Commissioner Christopher Graham highlighted confusion about its implementation.

Graham told this morning's Today programme on Radio 4 that because the UK Government has not published the regulations which would transpose the measures into law it is unlikely that any change in the law would take effect before autumn, months after the EU-set deadline.

"We wait to see how this is going to be transformed into UK law. What concerns me is that in less than 12 weeks time this Directive becomes European law," he said. "I don't speak for the Government but they'd be in trouble with the European Commission if they didn't transpose this Directive into UK law in pretty short order."

"They've been consulting about it and I think the regulations will appear quite quickly but then we do need a reasonable time for everyone to adapt so typically you need about three months to get ready, so I would expect by the autumn we will see the whole thing up and running," said Graham.

The DCMS spokesman said that the regulations would be in place by 25 May but that the technical solutions it was working with browser makers on would not be ready by that time.

It said that the Government would be advising the Information Commissioner's Office (ICO) not to take enforcement action against any company that was not in compliance with the law because of the delay to what the spokesman called the "technical solutions". As long as organisations were working towards compliance they should not be punished, he said.

The new cookie law was created in 2009 as part of a package of telecoms industry reforms. The European Union created a requirement that companies whose websites use cookies to track computers' use of their sites must seek the 'explicit consent' of users for that tracking to be lawful.

Debate has raged about whether sites will have to ask new users for that consent outright or whether web browser settings that permit cookies can be taken to mean that consent has been given.

The UK Government has previously said that it will simply copy the exact lettering of the EU Directive, adding no clarification or interpretation of its own when it creates regulations to turn the Directive into UK law.

Pinsent Masons and AmberhawkTraining will be running a data protection law update session on 11 April. Details and booking information (4-page / 164KB PDF)

We are processing your request. \n Thank you for your patience. An error occurred. This could be due to inactivity on the page - please try again.